This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer File: rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer (raw, json) Hash identifier: ezgvNsTOjxHN0TrrYYI/dTjT6ZGOUMckcS05df5QmS8= Subject key identifier: AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC3449E5907F9E355D5A791C804F0A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.147.232.0/22 IP: 194.5.90.0/23 IP: 194.5.126.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:34:49:e5:90:7f:9e:35:5d:5a:79:1c:80:4f:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:91:0d:a7:e0:aa:86:be:e9:6e:de:ff:24:20: c7:7d:d7:c4:b7:1b:a3:fb:3a:f5:1d:be:52:63:4f: 85:02:65:98:01:af:b1:5c:7b:74:5a:77:88:76:7d: 3a:0f:97:13:21:c0:59:8a:a1:73:23:fe:a3:8f:80: 3f:0c:13:a5:35:c7:39:7a:1b:18:80:8a:7a:0e:5f: 57:88:af:90:67:21:44:33:ee:4f:d5:54:56:b6:e3: c8:02:3c:99:e2:1e:a7:97:26:97:fc:db:c6:32:88: ad:43:4a:d8:e5:56:62:b6:a1:26:cb:0b:e4:00:c6: e1:b7:24:7f:83:ad:5c:27:68:d1:ac:4c:d6:6f:10: 9e:6d:64:6c:70:37:dd:68:33:de:4a:07:0d:8d:7e: ae:b1:5f:95:42:4a:48:d4:d0:29:f8:9f:f0:d9:69: e8:50:7a:01:ec:12:63:a0:14:f6:e1:c9:60:b9:55: 9b:7d:cd:0c:4e:cc:2b:a7:59:50:12:3d:8e:e4:3d: 78:62:ed:98:10:01:65:0f:a0:74:0d:6f:83:60:b8: 4e:9c:ce:8d:bc:52:9e:8e:05:80:cb:7c:f7:5e:a8: d9:58:22:58:47:57:db:54:46:69:4b:5a:5f:fb:1e: 57:1a:41:c4:98:2c:ab:c4:f9:f9:3f:b9:74:f1:5f: dd:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.147.232.0/22 194.5.90.0/23 194.5.126.0/23 Signature Algorithm: sha256WithRSAEncryption 61:d8:db:8e:f5:14:21:0a:9e:31:2d:d0:ec:2d:1b:30:21:eb: de:ea:1f:ad:8a:fb:e6:15:ab:a1:28:8b:c7:0d:6d:a1:a6:3b: 04:4b:c5:7a:6b:ce:fa:c3:34:83:a1:a3:84:21:85:00:39:a1: df:fd:34:1f:4e:50:63:b7:33:76:6d:ea:d8:b4:8b:7b:89:f6: c6:4c:ae:ce:0a:2e:ef:52:de:ac:5b:af:d3:60:0d:1a:f2:c4: 12:74:28:eb:ee:7e:2d:40:e2:48:2e:3a:e9:09:d8:df:a9:ee: 9a:b4:48:41:b4:34:fa:bc:07:9b:3a:55:2e:31:ea:cf:63:a6: 58:f5:90:52:fe:c4:f7:ea:f2:cc:ce:f2:e9:4d:2f:02:ca:8e: 5b:c7:3c:d3:aa:66:0b:43:8b:7c:39:e9:18:8e:a6:06:ac:23: 38:99:98:e6:0c:89:08:2c:10:10:69:90:4d:4e:b6:92:31:64: d3:9f:d8:56:1d:7b:0c:6f:54:9d:89:52:ab:3a:8a:41:0f:9b: 7c:c7:26:1b:14:4a:0c:43:ff:87:30:94:5d:54:dd:e6:6a:b0: 35:a8:1c:5a:03:b6:f6:b6:65:70:32:71:83:3d:b0:0d:e7:51: fe:26:3c:dd:6d:a8:3e:2d:0f:0e:b9:a4:a5:37:da:d2:56:50: 49:80:f9:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZt57DRJ5ZB/njVdWnkcgE8KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTM3Y2Y0YjFmZDRjZTU2Nzg4ZWQ4MGI3YTJlMTFjNjFiNDU2YWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45ENp+Cqhr7pbt7/JCDHfdfEtxuj +zr1Hb5SY0+FAmWYAa+xXHt0WneIdn06D5cTIcBZiqFzI/6jj4A/DBOlNcc5ehsY gIp6Dl9XiK+QZyFEM+5P1VRWtuPIAjyZ4h6nlyaX/NvGMoitQ0rY5VZitqEmywvk AMbhtyR/g61cJ2jRrEzWbxCebWRscDfdaDPeSgcNjX6usV+VQkpI1NAp+J/w2Wno UHoB7BJjoBT24clguVWbfc0MTswrp1lQEj2O5D14Yu2YEAFlD6B0DW+DYLhOnM6N vFKejgWAy3z3XqjZWCJYR1fbVEZpS1pf+x5XGkHEmCyrxPn5P7l08V/dxQIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFK43z0sf1M5WeI7YC3ouEcYbRWq0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYyLzJjNTNi ZC00YTE5LTQ0MjgtYjU1MC0xZWEyYThlYTE1NDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvMmM1M2Jk LTRhMTktNDQyOC1iNTUwLTFlYTJhOGVhMTU0My8xL3JqZlBTeF9VemxaNGp0Z0xl aTRSeGh0RmFyUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQCW5PoAwQBwgVaAwQBwgV+MA0GCSqGSIb3DQEB CwUAA4IBAQBh2NuO9RQhCp4xLdDsLRswIeve6h+tivvmFauhKIvHDW2hpjsES8V6 a876wzSDoaOEIYUAOaHf/TQfTlBjtzN2berYtIt7ifbGTK7OCi7vUt6sW6/TYA0a 8sQSdCjr7n4tQOJILjrpCdjfqe6atEhBtDT6vAebOlUuMerPY6ZY9ZBS/sT36vLM zvLpTS8Cyo5bxzzTqmYLQ4t8OekYjqYGrCM4mZjmDIkILBAQaZBNTraSMWTTn9hW HXsMb1SdiVKrOopBD5t8xyYbFEoMQ/+HMJRdVN3marA1qBxaA7b2tmVwMnGDPbAN 51H+Jjzdbag+LQ8OuaSlN9rSVlBJgPnV -----END CERTIFICATE-----Generated at Mon Jan 26 18:18:11 2026 by rpki-client